HP ProCurve NAC 800, Руководство пользователя

Страница: 217 / 591

End-user Access
Windows Endpoint Settings
5-9
Windows Endpoint Settings
IE Internet Security Setting
If the end-user has their IE Internet security zone set to
High
, the endpoint is
not testable. Using one of the following options will allow the endpoint to be
tested:
■ The end-user could change the
Internet security
to
Medium
(
Tools>>Internet options>>Security>>Custom level>>Reset to Medium
).
■ The end-user could add the IP address of the NAC 800 server to the
Trusted sites zone , and then set the Trusted sites zone to Medium.
■ The end-user could customize the
High
setting to allow the options
necessary for NAC 800 to test successfully. These options are as
follows:
• The NAC Agent test uses ActiveX
• The ActiveX test uses ActiveX
• All of the tests use JavaScript
Agent-based Test Method
Ports Used for Testing
You might need to configure some firewalls and routers to allow NAC 800 to
access port 1500 for agent-based testing.
TIP:
See “Ports used in NAC 800” on page E-1 for a complete description of the
ports used in NAC 800.
Windows Vista Settings
All Windows Vista endpoints must have administrator permissions in order
for the agent to install successfully. If the end-user is not logged in to the
endpoint with administrator permissions, the following occurs:
■ If User Account Control (UAC) is enabled, Windows Vista prompts
you for credentials. After the credentials are entered, the agent
installs.
■ If UAC is disabled, the agent installation fails without notifying the
end-user.